User contributions
Jump to navigation
Jump to search
- 22:54, 4 November 2015 diff hist +876 N Exploit Methods/Kernel location Created page with "= Details = Finding the kernel location can be an important first step for exploitation. Without it, for example, it's harder to make kernel function calls for privilege escal..."
- 22:46, 4 November 2015 diff hist +96 Active Projects →ASLR for kernel code current
- 22:44, 4 November 2015 diff hist +641 N Bug Classes/Uninitialized variables Created page with "= Details = When variables (on either stack or heap) are used without being explicitly initialized, behavior is "undefined". In reality, "uninitialized" just means "still has ..." current
- 22:35, 4 November 2015 diff hist +5 m Kernel Self Protection Project →Mission Statement
- 22:34, 4 November 2015 diff hist +890 N Bug Classes/Kernel pointer leak Created page with "= Details = When a kernel memory address (any of text, stack, heap, etc) leaks into userspace, attackers can learn potentially sensitive information about data layout, kernel ..."
- 22:17, 4 November 2015 diff hist +613 N Bug Classes/Format string injection Created page with "= Details = When an attacker supplied string is accidentally passed to format string parsing, the attacker can manipulate the resulting output. The write primitive available ..."
- 22:11, 4 November 2015 diff hist +506 N Bug Classes/Heap overflow Created page with "= Details = Heap overflows tend to occur due to integer overflows or otherwise broken bounds checking. Exploits overwrite adjacent heap memory, or manipulate the heap metadata..." current
- 22:02, 4 November 2015 diff hist +799 N Bug Classes/Integer overflow Created page with "= Details = Integer overflows (or underflows) occur when a multiplication happens that exceeds the size that can be represented by the datatype, generally wrapping around. Th..."
- 21:48, 4 November 2015 diff hist +1 Bug Classes/Stack overflow current
- 21:47, 4 November 2015 diff hist +206 Bug Classes/Stack overflow →Details
- 21:44, 4 November 2015 diff hist +92 Bug Classes/Stack overflow →Mitigations
- 21:35, 4 November 2015 diff hist +68 Bug Classes/Stack overflow
- 21:33, 4 November 2015 diff hist +684 N Bug Classes/Stack overflow Created page with "= Details = The traditional bug results in the stack buffer being written past the end of the stack frame, which allows the saved instruction pointer to be overwritten in orde..."
- 20:57, 4 November 2015 diff hist −7 Template:Bug Classes/Preload Blanked the page current
- 20:57, 4 November 2015 diff hist +7 N Template:Bug Classes/Preload Created page with "Testing"
- 20:52, 4 November 2015 diff hist +1 m Exploit Methods current
- 20:52, 4 November 2015 diff hist +340 N Exploit Methods Created page with "When bugsin the kernel provide unintended read and write primitives to an attacker, there are many techniques used to gain execution control over the kernel. H..."
- 20:49, 4 November 2015 diff hist +276 N Bug Classes Created page with "Many bugs in the kernel belong to specific classes. Here we try to focus on classes of bugs that have security implications, explain them, link to examples, and link to defens..." current
- 20:41, 4 November 2015 diff hist −5 Kernel Self Protection Project
- 17:59, 4 November 2015 diff hist +233 Kernel Self Protection Project carve out sections
- 16:39, 4 November 2015 diff hist −36 Kernel Self Protection Project →Kernel Self Protection Project
- 16:38, 4 November 2015 diff hist +216 Kernel Self Protection Project →Kernel Self Protection Project: add links to existing bug-hunting tools
- 16:35, 4 November 2015 diff hist +3,076 N Kernel Self Protection Project Outline the KSPP
- 16:02, 4 November 2015 diff hist +63 Projects →Kernel Security Projects
- 00:23, 14 August 2014 diff hist −3 Linux Security Summit 2014 →Day 2 (Tuesday 19th August)
- 06:38, 14 September 2013 diff hist −3 m Linux Security Summit 2013 →Day 1 (19th September)
- 21:59, 8 October 2012 diff hist +55 Projects →Kernel Security Projects
- 21:59, 8 October 2012 diff hist 0 m Linux Security Workgroup →Projects
- 21:48, 8 October 2012 diff hist −10 Linux Security Workgroup →Projects
- 21:48, 8 October 2012 diff hist +29 N Active Hardening Projects Active Hardening Projects moved to Active Projects: let's not over-use "hardening" current
- 21:48, 8 October 2012 diff hist 0 m Active Projects Active Hardening Projects moved to Active Projects: let's not over-use "hardening"
- 21:47, 8 October 2012 diff hist −16 Active Projects →Coverity
- 16:49, 31 August 2012 diff hist +41 Linux Security Summit 2012/Schedule →Kernel Security Subsystem Updates
- 16:48, 31 August 2012 diff hist +16 m Linux Security Summit 2012/Abstracts/Cook →Slides current
- 00:30, 31 August 2012 diff hist 0 m Linux Security Summit 2012/Abstracts/Cook →Slides
- 00:30, 31 August 2012 diff hist +48 Linux Security Summit 2012/Abstracts/Cook →Slides
- 00:29, 31 August 2012 diff hist +47 Linux Security Summit 2012/Abstracts/Cook →Abstract
- 23:42, 9 August 2012 diff hist −1 Linux Security Summit 2012/Schedule →Kernel Security Subsystem Updates: Yama capitalization